Check an IP Address, Domain Name, Subnet, or ASN

45.15.225.120 was found in our database!

$ whois 45.15.225.120

country·🇲🇩 Moldova

isp·Primanet Srl

asn·AS207164

network·Standard

$ sikker risk 45.15.225.120scoring →

confidence

76%High

first_seen·Feb 9, 2026

last_seen·19h ago

sessions·10

events·25

$ sikker protocols 45.15.225.120

SSH

10 / 25

$ sikker summary 45.15.225.120

45.15.225.120 has a threat confidence score of 76%. This IP address from Moldova (AS207164, Primanet Srl) has been observed in 10 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on February 9, 2026, most recently active March 31, 2026.

$ sikker behaviors 45.15.225.120catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery4x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 45.15.225.120

ssh_routeros_ip_cloud_print_probe8 ssh_uname_all4 ssh_cat_proc_cpuinfo4 ssh_ps_ef_grep_miner_bracket_case4 ssh_ifconfig_interface_enumeration4 ssh_routeros_user_set_password_id04 ssh_echo_hi_pipe_cat_numbering_test4 ssh_locate_telegram_tdata_identifier4 ssh_routeros_interface_lte_print_probe4 ssh_routeros_ip_cloud_set_ddns_enabled4 ssh_ps_pipe_grep_miner_case_insensitive4 ssh_ls_telegram_tdata_and_gsm_sms_artifacts4

$ sikker related 45.15.225.120

🇲🇩·More threats fromMoldova→AS·More threats fromPrimanet Srl→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.15.224.178	88%	135
185.164.80.171	59%	1
45.15.226.100	66%	16
45.15.227.120	69%	77
185.164.81.156	59%	1

IP Address	Confidence	Events
45.15.224.178	90%	136
91.225.219.211	75%	3
185.70.189.82	18%	28
178.132.144.161	44%	256
45.86.86.213	81%	328